IM Observatory

IM Observatory client report for google.com

Test started 2022-05-15 17:14:48 UTC .

Show server to server result | Permalink to this report |

Score

xmpp.l.google.com:5222
Certificate score:
100
Key exchange score:
90
Protocol score:
95
Cipher score:
60
Grade:

B

alt1.xmpp.l.google.com:5222
Certificate score:
100
Key exchange score:
90
Protocol score:
95
Cipher score:
60
Grade:

B

alt2.xmpp.l.google.com:5222
Certificate score:
100
Key exchange score:
90
Protocol score:
95
Cipher score:
60
Grade:

B

alt3.xmpp.l.google.com:5222
Certificate score:
100
Key exchange score:
90
Protocol score:
95
Cipher score:
60
Grade:

B

alt4.xmpp.l.google.com:5222
Certificate score:
100
Key exchange score:
90
Protocol score:
95
Cipher score:
60
Grade:

B

Show all 5 SRV targets

General

xmpp.l.google.com:5222
StartTLS
REQUIRED

SASL

Pre-TLS
X-GOOGLE-TOKEN
X-OAUTH2
Post-TLS
PLAIN
X-GOOGLE-TOKEN
X-OAUTH2

alt1.xmpp.l.google.com:5222
StartTLS
REQUIRED

SASL

Pre-TLS
X-GOOGLE-TOKEN
X-OAUTH2
Post-TLS
PLAIN
X-GOOGLE-TOKEN
X-OAUTH2

alt2.xmpp.l.google.com:5222
StartTLS
REQUIRED

SASL

Pre-TLS
X-GOOGLE-TOKEN
X-OAUTH2
Post-TLS
PLAIN
X-GOOGLE-TOKEN
X-OAUTH2

alt3.xmpp.l.google.com:5222
StartTLS
REQUIRED

SASL

Pre-TLS
X-GOOGLE-TOKEN
X-OAUTH2
Post-TLS
PLAIN
X-GOOGLE-TOKEN
X-OAUTH2

alt4.xmpp.l.google.com:5222
StartTLS
REQUIRED

SASL

Pre-TLS
X-GOOGLE-TOKEN
X-OAUTH2
Post-TLS
PLAIN
X-GOOGLE-TOKEN
X-OAUTH2

Show all 5 SRV targets

DNS

SRV records _xmpp-client._tcp.google.com NO DNSSEC

Priority Weight Port Server
5 0 5222 xmpp.l.google.com
20 0 5222 alt1.xmpp.l.google.com
20 0 5222 alt2.xmpp.l.google.com
20 0 5222 alt3.xmpp.l.google.com
20 0 5222 alt4.xmpp.l.google.com

TLSA records

_5222._tcp.xmpp.l.google.com NO DNSSEC

_5222._tcp.alt1.xmpp.l.google.com NO DNSSEC

_5222._tcp.alt2.xmpp.l.google.com NO DNSSEC

_5222._tcp.alt3.xmpp.l.google.com NO DNSSEC

_5222._tcp.alt4.xmpp.l.google.com NO DNSSEC

Show all 5 SRV targets

TLS

xmpp.l.google.com:5222

Certificates

#0 *.google.com

Subject
commonName
*.google.com
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2022-04-25 08:30:21 UTC
Valid to
2022-07-18 08:30:20 UTC
CRL
http://crls.pki.goog/gts1c3/fVJxbV-Ktmk.crl
OCSP
http://ocsp.pki.goog/gts1c3
Valid for google.com
YES
EA:10:63:C3:BF:94:8E:F8:95:2E:84:BB:F0:EB:41:4A:6B:94:40:33
Subject Alternative Names
DNSName
*.google.com
DNSName
*.appengine.google.com
DNSName
*.bdn.dev
DNSName
*.cloud.google.com
DNSName
*.crowdsource.google.com
DNSName
*.datacompute.google.com
DNSName
*.google.ca
DNSName
*.google.cl
DNSName
*.google.co.in
DNSName
*.google.co.jp
DNSName
*.google.co.uk
DNSName
*.google.com.ar
DNSName
*.google.com.au
DNSName
*.google.com.br
DNSName
*.google.com.co
DNSName
*.google.com.mx
DNSName
*.google.com.tr
DNSName
*.google.com.vn
DNSName
*.google.de
DNSName
*.google.es
DNSName
*.google.fr
DNSName
*.google.hu
DNSName
*.google.it
DNSName
*.google.nl
DNSName
*.google.pl
DNSName
*.google.pt
DNSName
*.googleadapis.com
DNSName
*.googleapis.cn
DNSName
*.googlevideo.com
DNSName
*.gstatic.cn
DNSName
*.gstatic-cn.com
DNSName
googlecnapps.cn
DNSName
*.googlecnapps.cn
DNSName
googleapps-cn.com
DNSName
*.googleapps-cn.com
DNSName
gkecnapps.cn
DNSName
*.gkecnapps.cn
DNSName
googledownloads.cn
DNSName
*.googledownloads.cn
DNSName
recaptcha.net.cn
DNSName
*.recaptcha.net.cn
DNSName
recaptcha-cn.net
DNSName
*.recaptcha-cn.net
DNSName
widevine.cn
DNSName
*.widevine.cn
DNSName
ampproject.org.cn
DNSName
*.ampproject.org.cn
DNSName
ampproject.net.cn
DNSName
*.ampproject.net.cn
DNSName
google-analytics-cn.com
DNSName
*.google-analytics-cn.com
DNSName
googleadservices-cn.com
DNSName
*.googleadservices-cn.com
DNSName
googlevads-cn.com
DNSName
*.googlevads-cn.com
DNSName
googleapis-cn.com
DNSName
*.googleapis-cn.com
DNSName
googleoptimize-cn.com
DNSName
*.googleoptimize-cn.com
DNSName
doubleclick-cn.net
DNSName
*.doubleclick-cn.net
DNSName
*.fls.doubleclick-cn.net
DNSName
*.g.doubleclick-cn.net
DNSName
doubleclick.cn
DNSName
*.doubleclick.cn
DNSName
*.fls.doubleclick.cn
DNSName
*.g.doubleclick.cn
DNSName
dartsearch-cn.net
DNSName
*.dartsearch-cn.net
DNSName
googletraveladservices-cn.com
DNSName
*.googletraveladservices-cn.com
DNSName
googletagservices-cn.com
DNSName
*.googletagservices-cn.com
DNSName
googletagmanager-cn.com
DNSName
*.googletagmanager-cn.com
DNSName
googlesyndication-cn.com
DNSName
*.googlesyndication-cn.com
DNSName
*.safeframe.googlesyndication-cn.com
DNSName
app-measurement-cn.com
DNSName
*.app-measurement-cn.com
DNSName
gvt1-cn.com
DNSName
*.gvt1-cn.com
DNSName
gvt2-cn.com
DNSName
*.gvt2-cn.com
DNSName
2mdn-cn.net
DNSName
*.2mdn-cn.net
DNSName
googleflights-cn.net
DNSName
*.googleflights-cn.net
DNSName
admob-cn.com
DNSName
*.admob-cn.com
DNSName
*.gstatic.com
DNSName
*.metric.gstatic.com
DNSName
*.gvt1.com
DNSName
*.gcpcdn.gvt1.com
DNSName
*.gvt2.com
DNSName
*.gcp.gvt2.com
DNSName
*.url.google.com
DNSName
*.youtube-nocookie.com
DNSName
*.ytimg.com
DNSName
android.com
DNSName
*.android.com
DNSName
*.flash.android.com
DNSName
g.cn
DNSName
*.g.cn
DNSName
g.co
DNSName
*.g.co
DNSName
goo.gl
DNSName
www.goo.gl
DNSName
google-analytics.com
DNSName
*.google-analytics.com
DNSName
google.com Matches
DNSName
googlecommerce.com
DNSName
*.googlecommerce.com
DNSName
ggpht.cn
DNSName
*.ggpht.cn
DNSName
urchin.com
DNSName
*.urchin.com
DNSName
youtu.be
DNSName
youtube.com
DNSName
*.youtube.com
DNSName
youtubeeducation.com
DNSName
*.youtubeeducation.com
DNSName
youtubekids.com
DNSName
*.youtubekids.com
DNSName
yt.be
DNSName
*.yt.be
DNSName
android.clients.google.com
DNSName
developer.android.google.cn
DNSName
developers.android.google.cn
DNSName
source.android.google.cn

#1 GTS CA 1C3

Subject
commonName
GTS CA 1C3
countryName
US
organizationName
Google Trust Services LLC
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2020-08-13 00:00:42 UTC
Valid to
2027-09-30 00:00:42 UTC
CRL
http://crl.pki.goog/gtsr1/gtsr1.crl
OCSP
http://ocsp.pki.goog/gtsr1
1E:7E:F6:47:CB:A1:50:28:1C:60:89:72:57:10:28:78:C4:BD:8C:DC

#2 GTS Root R1

Subject
commonName
GTS Root R1
countryName
US
organizationName
Google Trust Services LLC
Details
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2020-06-19 00:00:42 UTC
Valid to
2028-01-28 00:00:42 UTC
CRL
http://crl.pki.goog/gsr1/gsr1.crl
OCSP
http://ocsp.pki.goog/gsr1
08:74:54:87:E8:91:C1:9E:30:78:C1:F2:A0:7E:45:29:50:EF:36:F6

GlobalSign Root CA

Subject
commonName
GlobalSign Root CA
countryName
BE
organizationalUnitName
Root CA
organizationName
GlobalSign nv-sa
Details
Signature algorithm
sha1WithRSAEncryption
Public key
2048 bit RSA
Valid from
1998-09-01 12:00:00 UTC
Valid to
2028-01-28 12:00:00 UTC 
B1:BC:96:8B:D4:F4:9D:62:2A:A8:9A:81:F2:15:01:52:A4:1D:82:9C

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: prime256v1
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: prime256v1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: prime256v1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: prime256v1
AES128-GCM-SHA256 (0x9c) 128 No -
AES256-GCM-SHA384 (0x9d) 256 No -
AES128-SHA (0x2f) 128 No -
AES256-SHA (0x35) 256 No -
DES-CBC3-SHA (0xa) WEAK 112 No -

alt1.xmpp.l.google.com:5222

Certificates

#0 *.google.com

Subject
commonName
*.google.com
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2022-04-25 08:30:21 UTC
Valid to
2022-07-18 08:30:20 UTC
CRL
http://crls.pki.goog/gts1c3/fVJxbV-Ktmk.crl
OCSP
http://ocsp.pki.goog/gts1c3
EA:10:63:C3:BF:94:8E:F8:95:2E:84:BB:F0:EB:41:4A:6B:94:40:33
Subject Alternative Names
DNSName
*.google.com
DNSName
*.appengine.google.com
DNSName
*.bdn.dev
DNSName
*.cloud.google.com
DNSName
*.crowdsource.google.com
DNSName
*.datacompute.google.com
DNSName
*.google.ca
DNSName
*.google.cl
DNSName
*.google.co.in
DNSName
*.google.co.jp
DNSName
*.google.co.uk
DNSName
*.google.com.ar
DNSName
*.google.com.au
DNSName
*.google.com.br
DNSName
*.google.com.co
DNSName
*.google.com.mx
DNSName
*.google.com.tr
DNSName
*.google.com.vn
DNSName
*.google.de
DNSName
*.google.es
DNSName
*.google.fr
DNSName
*.google.hu
DNSName
*.google.it
DNSName
*.google.nl
DNSName
*.google.pl
DNSName
*.google.pt
DNSName
*.googleadapis.com
DNSName
*.googleapis.cn
DNSName
*.googlevideo.com
DNSName
*.gstatic.cn
DNSName
*.gstatic-cn.com
DNSName
googlecnapps.cn
DNSName
*.googlecnapps.cn
DNSName
googleapps-cn.com
DNSName
*.googleapps-cn.com
DNSName
gkecnapps.cn
DNSName
*.gkecnapps.cn
DNSName
googledownloads.cn
DNSName
*.googledownloads.cn
DNSName
recaptcha.net.cn
DNSName
*.recaptcha.net.cn
DNSName
recaptcha-cn.net
DNSName
*.recaptcha-cn.net
DNSName
widevine.cn
DNSName
*.widevine.cn
DNSName
ampproject.org.cn
DNSName
*.ampproject.org.cn
DNSName
ampproject.net.cn
DNSName
*.ampproject.net.cn
DNSName
google-analytics-cn.com
DNSName
*.google-analytics-cn.com
DNSName
googleadservices-cn.com
DNSName
*.googleadservices-cn.com
DNSName
googlevads-cn.com
DNSName
*.googlevads-cn.com
DNSName
googleapis-cn.com
DNSName
*.googleapis-cn.com
DNSName
googleoptimize-cn.com
DNSName
*.googleoptimize-cn.com
DNSName
doubleclick-cn.net
DNSName
*.doubleclick-cn.net
DNSName
*.fls.doubleclick-cn.net
DNSName
*.g.doubleclick-cn.net
DNSName
doubleclick.cn
DNSName
*.doubleclick.cn
DNSName
*.fls.doubleclick.cn
DNSName
*.g.doubleclick.cn
DNSName
dartsearch-cn.net
DNSName
*.dartsearch-cn.net
DNSName
googletraveladservices-cn.com
DNSName
*.googletraveladservices-cn.com
DNSName
googletagservices-cn.com
DNSName
*.googletagservices-cn.com
DNSName
googletagmanager-cn.com
DNSName
*.googletagmanager-cn.com
DNSName
googlesyndication-cn.com
DNSName
*.googlesyndication-cn.com
DNSName
*.safeframe.googlesyndication-cn.com
DNSName
app-measurement-cn.com
DNSName
*.app-measurement-cn.com
DNSName
gvt1-cn.com
DNSName
*.gvt1-cn.com
DNSName
gvt2-cn.com
DNSName
*.gvt2-cn.com
DNSName
2mdn-cn.net
DNSName
*.2mdn-cn.net
DNSName
googleflights-cn.net
DNSName
*.googleflights-cn.net
DNSName
admob-cn.com
DNSName
*.admob-cn.com
DNSName
*.gstatic.com
DNSName
*.metric.gstatic.com
DNSName
*.gvt1.com
DNSName
*.gcpcdn.gvt1.com
DNSName
*.gvt2.com
DNSName
*.gcp.gvt2.com
DNSName
*.url.google.com
DNSName
*.youtube-nocookie.com
DNSName
*.ytimg.com
DNSName
android.com
DNSName
*.android.com
DNSName
*.flash.android.com
DNSName
g.cn
DNSName
*.g.cn
DNSName
g.co
DNSName
*.g.co
DNSName
goo.gl
DNSName
www.goo.gl
DNSName
google-analytics.com
DNSName
*.google-analytics.com
DNSName
google.com
DNSName
googlecommerce.com
DNSName
*.googlecommerce.com
DNSName
ggpht.cn
DNSName
*.ggpht.cn
DNSName
urchin.com
DNSName
*.urchin.com
DNSName
youtu.be
DNSName
youtube.com
DNSName
*.youtube.com
DNSName
youtubeeducation.com
DNSName
*.youtubeeducation.com
DNSName
youtubekids.com
DNSName
*.youtubekids.com
DNSName
yt.be
DNSName
*.yt.be
DNSName
android.clients.google.com
DNSName
developer.android.google.cn
DNSName
developers.android.google.cn
DNSName
source.android.google.cn

#1 GTS CA 1C3

Subject
commonName
GTS CA 1C3
countryName
US
organizationName
Google Trust Services LLC
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2020-08-13 00:00:42 UTC
Valid to
2027-09-30 00:00:42 UTC
CRL
http://crl.pki.goog/gtsr1/gtsr1.crl
OCSP
http://ocsp.pki.goog/gtsr1
1E:7E:F6:47:CB:A1:50:28:1C:60:89:72:57:10:28:78:C4:BD:8C:DC

#2 GTS Root R1

Subject
commonName
GTS Root R1
countryName
US
organizationName
Google Trust Services LLC
Details
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2020-06-19 00:00:42 UTC
Valid to
2028-01-28 00:00:42 UTC
CRL
http://crl.pki.goog/gsr1/gsr1.crl
OCSP
http://ocsp.pki.goog/gsr1
08:74:54:87:E8:91:C1:9E:30:78:C1:F2:A0:7E:45:29:50:EF:36:F6

GlobalSign Root CA

Subject
commonName
GlobalSign Root CA
countryName
BE
organizationalUnitName
Root CA
organizationName
GlobalSign nv-sa
Details
Signature algorithm
sha1WithRSAEncryption
Public key
2048 bit RSA
Valid from
1998-09-01 12:00:00 UTC
Valid to
2028-01-28 12:00:00 UTC 
B1:BC:96:8B:D4:F4:9D:62:2A:A8:9A:81:F2:15:01:52:A4:1D:82:9C

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: prime256v1
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: prime256v1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: prime256v1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: prime256v1
AES128-GCM-SHA256 (0x9c) 128 No -
AES256-GCM-SHA384 (0x9d) 256 No -
AES128-SHA (0x2f) 128 No -
AES256-SHA (0x35) 256 No -
DES-CBC3-SHA (0xa) WEAK 112 No -

alt2.xmpp.l.google.com:5222

Certificates

#0 *.google.com

Subject
commonName
*.google.com
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2022-04-25 08:30:21 UTC
Valid to
2022-07-18 08:30:20 UTC
CRL
http://crls.pki.goog/gts1c3/fVJxbV-Ktmk.crl
OCSP
http://ocsp.pki.goog/gts1c3
EA:10:63:C3:BF:94:8E:F8:95:2E:84:BB:F0:EB:41:4A:6B:94:40:33
Subject Alternative Names
DNSName
*.google.com
DNSName
*.appengine.google.com
DNSName
*.bdn.dev
DNSName
*.cloud.google.com
DNSName
*.crowdsource.google.com
DNSName
*.datacompute.google.com
DNSName
*.google.ca
DNSName
*.google.cl
DNSName
*.google.co.in
DNSName
*.google.co.jp
DNSName
*.google.co.uk
DNSName
*.google.com.ar
DNSName
*.google.com.au
DNSName
*.google.com.br
DNSName
*.google.com.co
DNSName
*.google.com.mx
DNSName
*.google.com.tr
DNSName
*.google.com.vn
DNSName
*.google.de
DNSName
*.google.es
DNSName
*.google.fr
DNSName
*.google.hu
DNSName
*.google.it
DNSName
*.google.nl
DNSName
*.google.pl
DNSName
*.google.pt
DNSName
*.googleadapis.com
DNSName
*.googleapis.cn
DNSName
*.googlevideo.com
DNSName
*.gstatic.cn
DNSName
*.gstatic-cn.com
DNSName
googlecnapps.cn
DNSName
*.googlecnapps.cn
DNSName
googleapps-cn.com
DNSName
*.googleapps-cn.com
DNSName
gkecnapps.cn
DNSName
*.gkecnapps.cn
DNSName
googledownloads.cn
DNSName
*.googledownloads.cn
DNSName
recaptcha.net.cn
DNSName
*.recaptcha.net.cn
DNSName
recaptcha-cn.net
DNSName
*.recaptcha-cn.net
DNSName
widevine.cn
DNSName
*.widevine.cn
DNSName
ampproject.org.cn
DNSName
*.ampproject.org.cn
DNSName
ampproject.net.cn
DNSName
*.ampproject.net.cn
DNSName
google-analytics-cn.com
DNSName
*.google-analytics-cn.com
DNSName
googleadservices-cn.com
DNSName
*.googleadservices-cn.com
DNSName
googlevads-cn.com
DNSName
*.googlevads-cn.com
DNSName
googleapis-cn.com
DNSName
*.googleapis-cn.com
DNSName
googleoptimize-cn.com
DNSName
*.googleoptimize-cn.com
DNSName
doubleclick-cn.net
DNSName
*.doubleclick-cn.net
DNSName
*.fls.doubleclick-cn.net
DNSName
*.g.doubleclick-cn.net
DNSName
doubleclick.cn
DNSName
*.doubleclick.cn
DNSName
*.fls.doubleclick.cn
DNSName
*.g.doubleclick.cn
DNSName
dartsearch-cn.net
DNSName
*.dartsearch-cn.net
DNSName
googletraveladservices-cn.com
DNSName
*.googletraveladservices-cn.com
DNSName
googletagservices-cn.com
DNSName
*.googletagservices-cn.com
DNSName
googletagmanager-cn.com
DNSName
*.googletagmanager-cn.com
DNSName
googlesyndication-cn.com
DNSName
*.googlesyndication-cn.com
DNSName
*.safeframe.googlesyndication-cn.com
DNSName
app-measurement-cn.com
DNSName
*.app-measurement-cn.com
DNSName
gvt1-cn.com
DNSName
*.gvt1-cn.com
DNSName
gvt2-cn.com
DNSName
*.gvt2-cn.com
DNSName
2mdn-cn.net
DNSName
*.2mdn-cn.net
DNSName
googleflights-cn.net
DNSName
*.googleflights-cn.net
DNSName
admob-cn.com
DNSName
*.admob-cn.com
DNSName
*.gstatic.com
DNSName
*.metric.gstatic.com
DNSName
*.gvt1.com
DNSName
*.gcpcdn.gvt1.com
DNSName
*.gvt2.com
DNSName
*.gcp.gvt2.com
DNSName
*.url.google.com
DNSName
*.youtube-nocookie.com
DNSName
*.ytimg.com
DNSName
android.com
DNSName
*.android.com
DNSName
*.flash.android.com
DNSName
g.cn
DNSName
*.g.cn
DNSName
g.co
DNSName
*.g.co
DNSName
goo.gl
DNSName
www.goo.gl
DNSName
google-analytics.com
DNSName
*.google-analytics.com
DNSName
google.com
DNSName
googlecommerce.com
DNSName
*.googlecommerce.com
DNSName
ggpht.cn
DNSName
*.ggpht.cn
DNSName
urchin.com
DNSName
*.urchin.com
DNSName
youtu.be
DNSName
youtube.com
DNSName
*.youtube.com
DNSName
youtubeeducation.com
DNSName
*.youtubeeducation.com
DNSName
youtubekids.com
DNSName
*.youtubekids.com
DNSName
yt.be
DNSName
*.yt.be
DNSName
android.clients.google.com
DNSName
developer.android.google.cn
DNSName
developers.android.google.cn
DNSName
source.android.google.cn

#1 GTS CA 1C3

Subject
commonName
GTS CA 1C3
countryName
US
organizationName
Google Trust Services LLC
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2020-08-13 00:00:42 UTC
Valid to
2027-09-30 00:00:42 UTC
CRL
http://crl.pki.goog/gtsr1/gtsr1.crl
OCSP
http://ocsp.pki.goog/gtsr1
1E:7E:F6:47:CB:A1:50:28:1C:60:89:72:57:10:28:78:C4:BD:8C:DC

#2 GTS Root R1

Subject
commonName
GTS Root R1
countryName
US
organizationName
Google Trust Services LLC
Details
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2020-06-19 00:00:42 UTC
Valid to
2028-01-28 00:00:42 UTC
CRL
http://crl.pki.goog/gsr1/gsr1.crl
OCSP
http://ocsp.pki.goog/gsr1
08:74:54:87:E8:91:C1:9E:30:78:C1:F2:A0:7E:45:29:50:EF:36:F6

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: prime256v1
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: prime256v1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: prime256v1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: prime256v1
AES128-GCM-SHA256 (0x9c) 128 No -
AES256-GCM-SHA384 (0x9d) 256 No -
AES128-SHA (0x2f) 128 No -
AES256-SHA (0x35) 256 No -
DES-CBC3-SHA (0xa) WEAK 112 No -

alt3.xmpp.l.google.com:5222

Certificates

#0 *.google.com

Subject
commonName
*.google.com
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2022-04-25 08:30:21 UTC
Valid to
2022-07-18 08:30:20 UTC
CRL
http://crls.pki.goog/gts1c3/fVJxbV-Ktmk.crl
OCSP
http://ocsp.pki.goog/gts1c3
EA:10:63:C3:BF:94:8E:F8:95:2E:84:BB:F0:EB:41:4A:6B:94:40:33
Subject Alternative Names
DNSName
*.google.com
DNSName
*.appengine.google.com
DNSName
*.bdn.dev
DNSName
*.cloud.google.com
DNSName
*.crowdsource.google.com
DNSName
*.datacompute.google.com
DNSName
*.google.ca
DNSName
*.google.cl
DNSName
*.google.co.in
DNSName
*.google.co.jp
DNSName
*.google.co.uk
DNSName
*.google.com.ar
DNSName
*.google.com.au
DNSName
*.google.com.br
DNSName
*.google.com.co
DNSName
*.google.com.mx
DNSName
*.google.com.tr
DNSName
*.google.com.vn
DNSName
*.google.de
DNSName
*.google.es
DNSName
*.google.fr
DNSName
*.google.hu
DNSName
*.google.it
DNSName
*.google.nl
DNSName
*.google.pl
DNSName
*.google.pt
DNSName
*.googleadapis.com
DNSName
*.googleapis.cn
DNSName
*.googlevideo.com
DNSName
*.gstatic.cn
DNSName
*.gstatic-cn.com
DNSName
googlecnapps.cn
DNSName
*.googlecnapps.cn
DNSName
googleapps-cn.com
DNSName
*.googleapps-cn.com
DNSName
gkecnapps.cn
DNSName
*.gkecnapps.cn
DNSName
googledownloads.cn
DNSName
*.googledownloads.cn
DNSName
recaptcha.net.cn
DNSName
*.recaptcha.net.cn
DNSName
recaptcha-cn.net
DNSName
*.recaptcha-cn.net
DNSName
widevine.cn
DNSName
*.widevine.cn
DNSName
ampproject.org.cn
DNSName
*.ampproject.org.cn
DNSName
ampproject.net.cn
DNSName
*.ampproject.net.cn
DNSName
google-analytics-cn.com
DNSName
*.google-analytics-cn.com
DNSName
googleadservices-cn.com
DNSName
*.googleadservices-cn.com
DNSName
googlevads-cn.com
DNSName
*.googlevads-cn.com
DNSName
googleapis-cn.com
DNSName
*.googleapis-cn.com
DNSName
googleoptimize-cn.com
DNSName
*.googleoptimize-cn.com
DNSName
doubleclick-cn.net
DNSName
*.doubleclick-cn.net
DNSName
*.fls.doubleclick-cn.net
DNSName
*.g.doubleclick-cn.net
DNSName
doubleclick.cn
DNSName
*.doubleclick.cn
DNSName
*.fls.doubleclick.cn
DNSName
*.g.doubleclick.cn
DNSName
dartsearch-cn.net
DNSName
*.dartsearch-cn.net
DNSName
googletraveladservices-cn.com
DNSName
*.googletraveladservices-cn.com
DNSName
googletagservices-cn.com
DNSName
*.googletagservices-cn.com
DNSName
googletagmanager-cn.com
DNSName
*.googletagmanager-cn.com
DNSName
googlesyndication-cn.com
DNSName
*.googlesyndication-cn.com
DNSName
*.safeframe.googlesyndication-cn.com
DNSName
app-measurement-cn.com
DNSName
*.app-measurement-cn.com
DNSName
gvt1-cn.com
DNSName
*.gvt1-cn.com
DNSName
gvt2-cn.com
DNSName
*.gvt2-cn.com
DNSName
2mdn-cn.net
DNSName
*.2mdn-cn.net
DNSName
googleflights-cn.net
DNSName
*.googleflights-cn.net
DNSName
admob-cn.com
DNSName
*.admob-cn.com
DNSName
*.gstatic.com
DNSName
*.metric.gstatic.com
DNSName
*.gvt1.com
DNSName
*.gcpcdn.gvt1.com
DNSName
*.gvt2.com
DNSName
*.gcp.gvt2.com
DNSName
*.url.google.com
DNSName
*.youtube-nocookie.com
DNSName
*.ytimg.com
DNSName
android.com
DNSName
*.android.com
DNSName
*.flash.android.com
DNSName
g.cn
DNSName
*.g.cn
DNSName
g.co
DNSName
*.g.co
DNSName
goo.gl
DNSName
www.goo.gl
DNSName
google-analytics.com
DNSName
*.google-analytics.com
DNSName
google.com
DNSName
googlecommerce.com
DNSName
*.googlecommerce.com
DNSName
ggpht.cn
DNSName
*.ggpht.cn
DNSName
urchin.com
DNSName
*.urchin.com
DNSName
youtu.be
DNSName
youtube.com
DNSName
*.youtube.com
DNSName
youtubeeducation.com
DNSName
*.youtubeeducation.com
DNSName
youtubekids.com
DNSName
*.youtubekids.com
DNSName
yt.be
DNSName
*.yt.be
DNSName
android.clients.google.com
DNSName
developer.android.google.cn
DNSName
developers.android.google.cn
DNSName
source.android.google.cn

#2 GTS Root R1

Subject
commonName
GTS Root R1
countryName
US
organizationName
Google Trust Services LLC
Details
Warning: Certificate is unused.
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2020-06-19 00:00:42 UTC
Valid to
2028-01-28 00:00:42 UTC
CRL
http://crl.pki.goog/gsr1/gsr1.crl
OCSP
http://ocsp.pki.goog/gsr1
08:74:54:87:E8:91:C1:9E:30:78:C1:F2:A0:7E:45:29:50:EF:36:F6

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: prime256v1
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: prime256v1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: prime256v1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: prime256v1
AES128-GCM-SHA256 (0x9c) 128 No -
AES256-GCM-SHA384 (0x9d) 256 No -
AES128-SHA (0x2f) 128 No -
AES256-SHA (0x35) 256 No -
DES-CBC3-SHA (0xa) WEAK 112 No -

alt4.xmpp.l.google.com:5222

Certificates

#0 *.google.com

Subject
commonName
*.google.com
Details
Signature algorithm
sha256WithRSAEncryption
Public key
2048 bit RSA
Valid from
2022-04-25 08:30:21 UTC
Valid to
2022-07-18 08:30:20 UTC
CRL
http://crls.pki.goog/gts1c3/fVJxbV-Ktmk.crl
OCSP
http://ocsp.pki.goog/gts1c3
EA:10:63:C3:BF:94:8E:F8:95:2E:84:BB:F0:EB:41:4A:6B:94:40:33
Subject Alternative Names
DNSName
*.google.com
DNSName
*.appengine.google.com
DNSName
*.bdn.dev
DNSName
*.cloud.google.com
DNSName
*.crowdsource.google.com
DNSName
*.datacompute.google.com
DNSName
*.google.ca
DNSName
*.google.cl
DNSName
*.google.co.in
DNSName
*.google.co.jp
DNSName
*.google.co.uk
DNSName
*.google.com.ar
DNSName
*.google.com.au
DNSName
*.google.com.br
DNSName
*.google.com.co
DNSName
*.google.com.mx
DNSName
*.google.com.tr
DNSName
*.google.com.vn
DNSName
*.google.de
DNSName
*.google.es
DNSName
*.google.fr
DNSName
*.google.hu
DNSName
*.google.it
DNSName
*.google.nl
DNSName
*.google.pl
DNSName
*.google.pt
DNSName
*.googleadapis.com
DNSName
*.googleapis.cn
DNSName
*.googlevideo.com
DNSName
*.gstatic.cn
DNSName
*.gstatic-cn.com
DNSName
googlecnapps.cn
DNSName
*.googlecnapps.cn
DNSName
googleapps-cn.com
DNSName
*.googleapps-cn.com
DNSName
gkecnapps.cn
DNSName
*.gkecnapps.cn
DNSName
googledownloads.cn
DNSName
*.googledownloads.cn
DNSName
recaptcha.net.cn
DNSName
*.recaptcha.net.cn
DNSName
recaptcha-cn.net
DNSName
*.recaptcha-cn.net
DNSName
widevine.cn
DNSName
*.widevine.cn
DNSName
ampproject.org.cn
DNSName
*.ampproject.org.cn
DNSName
ampproject.net.cn
DNSName
*.ampproject.net.cn
DNSName
google-analytics-cn.com
DNSName
*.google-analytics-cn.com
DNSName
googleadservices-cn.com
DNSName
*.googleadservices-cn.com
DNSName
googlevads-cn.com
DNSName
*.googlevads-cn.com
DNSName
googleapis-cn.com
DNSName
*.googleapis-cn.com
DNSName
googleoptimize-cn.com
DNSName
*.googleoptimize-cn.com
DNSName
doubleclick-cn.net
DNSName
*.doubleclick-cn.net
DNSName
*.fls.doubleclick-cn.net
DNSName
*.g.doubleclick-cn.net
DNSName
doubleclick.cn
DNSName
*.doubleclick.cn
DNSName
*.fls.doubleclick.cn
DNSName
*.g.doubleclick.cn
DNSName
dartsearch-cn.net
DNSName
*.dartsearch-cn.net
DNSName
googletraveladservices-cn.com
DNSName
*.googletraveladservices-cn.com
DNSName
googletagservices-cn.com
DNSName
*.googletagservices-cn.com
DNSName
googletagmanager-cn.com
DNSName
*.googletagmanager-cn.com
DNSName
googlesyndication-cn.com
DNSName
*.googlesyndication-cn.com
DNSName
*.safeframe.googlesyndication-cn.com
DNSName
app-measurement-cn.com
DNSName
*.app-measurement-cn.com
DNSName
gvt1-cn.com
DNSName
*.gvt1-cn.com
DNSName
gvt2-cn.com
DNSName
*.gvt2-cn.com
DNSName
2mdn-cn.net
DNSName
*.2mdn-cn.net
DNSName
googleflights-cn.net
DNSName
*.googleflights-cn.net
DNSName
admob-cn.com
DNSName
*.admob-cn.com
DNSName
*.gstatic.com
DNSName
*.metric.gstatic.com
DNSName
*.gvt1.com
DNSName
*.gcpcdn.gvt1.com
DNSName
*.gvt2.com
DNSName
*.gcp.gvt2.com
DNSName
*.url.google.com
DNSName
*.youtube-nocookie.com
DNSName
*.ytimg.com
DNSName
android.com
DNSName
*.android.com
DNSName
*.flash.android.com
DNSName
g.cn
DNSName
*.g.cn
DNSName
g.co
DNSName
*.g.co
DNSName
goo.gl
DNSName
www.goo.gl
DNSName
google-analytics.com
DNSName
*.google-analytics.com
DNSName
google.com
DNSName
googlecommerce.com
DNSName
*.googlecommerce.com
DNSName
ggpht.cn
DNSName
*.ggpht.cn
DNSName
urchin.com
DNSName
*.urchin.com
DNSName
youtu.be
DNSName
youtube.com
DNSName
*.youtube.com
DNSName
youtubeeducation.com
DNSName
*.youtubeeducation.com
DNSName
youtubekids.com
DNSName
*.youtubekids.com
DNSName
yt.be
DNSName
*.yt.be
DNSName
android.clients.google.com
DNSName
developer.android.google.cn
DNSName
developers.android.google.cn
DNSName
source.android.google.cn

#2 GTS Root R1

Subject
commonName
GTS Root R1
countryName
US
organizationName
Google Trust Services LLC
Details
Warning: Certificate is unused.
Signature algorithm
sha256WithRSAEncryption
Public key
4096 bit RSA
Valid from
2020-06-19 00:00:42 UTC
Valid to
2028-01-28 00:00:42 UTC
CRL
http://crl.pki.goog/gsr1/gsr1.crl
OCSP
http://ocsp.pki.goog/gsr1
08:74:54:87:E8:91:C1:9E:30:78:C1:F2:A0:7E:45:29:50:EF:36:F6

Protocols

SSLv2 No
SSLv3 No
TLSv1 Yes
TLSv1.1 Yes
TLSv1.2 Yes

Ciphers

Server does not respect the client's cipher ordering.

Cipher suiteBitsizeForward secrecyInfo
ECDHE-RSA-AES128-GCM-SHA256 (0xc02f) 128 Yes Curve: prime256v1
ECDHE-RSA-AES256-GCM-SHA384 (0xc030) 256 Yes Curve: prime256v1
ECDHE-RSA-AES128-SHA (0xc013) 128 Yes Curve: prime256v1
ECDHE-RSA-AES256-SHA (0xc014) 256 Yes Curve: prime256v1
AES128-GCM-SHA256 (0x9c) 128 No -
AES256-GCM-SHA384 (0x9d) 256 No -
AES128-SHA (0x2f) 128 No -
AES256-SHA (0x35) 256 No -
DES-CBC3-SHA (0xa) WEAK 112 No -

Show all 5 SRV targets

Badge

xmpp.net score

Want to show this result on your webpage? Add this:

<a href='https://xmpp.net/result.php?domain=google.com&amp;type=client'><img src='https://xmpp.net/badge.php?domain=google.com' alt='xmpp.net score' /></a>

Some rights reserved.